Hi,Recently, I've been doing some cleanup work with our jamf pro instance and have gotten to printers. We have around 15 Konica Minolta BizHub 554e/754e's that our macs direct print to using LPD. Another admin has one giant AppleScript used to add all applicable printers, but I feel like there has to be a more efficient way. I've played around with Jamf Admin mapping, and it works fine; however, it seems like scripting might be the way to go. Does anyone have any advice or a good script they can share? 

Hello, is there a way to sync Sharepoint online libraries in OneDrive on Mac computers using a script/jamf? Thank you!

Hello,   I want to enable 'Lost Mode' for a lost device. I cannot find this option in 'Management Tab' for the concerned device. This option is also missed for other iOS devices.   Any idea how to troubleshoot that? Thanks  

How can I create a Patch Management Rule to distribute Safari for macOS Monterey and for macOS Ventura Clients? The Patch Management Policy does not offer an option for both systems. I created one for the Ventura Clients which is scoped to a Smart Group, but how can I setup a second one for the Monterey Clients?

Hell Team, I am looking for a solutions to get the recovery key in my JAMF console for those mac devices recovery key is missing, but user should be interrupted. I can see it has happened for both personal and institutional key. What is the main concept of personal recovery key validation, some time it is showing invalid or unknown but recovery key is there, strange! Please help to understand and also with a perfect resolution I am looking for. BTW device is getting encrypted by a config profile and to escrow the key in JAMF.

Few macs are not encrypted as per JAMF console but JAMF is showing me their individual recovery key, how it is possible, do you think those are false key for those macs or macs are encrypted but showing me false info as not encrypted? In this case what is the solutions?

(Apologies in advance for the long post) Upon seeing the news of Jamf Pro 11 and the new versions of JAMF 200, 300, 370, and 400 classes and certifications, I have a bunch of thoughts and questions. For further context, I currently have Jamf Pro 10 versions of my Jamf 100, 200, and 300, also a flavor of 170 that still has the resulting certification named as "Jamf Certified Endpoint Security Associate" and (with my certification stored in SkillJar and not Credly). First off, while I appreciate that validity periods make sense for a product that (even throughout version 10, alone) was and is constantly evolving, spending $2500 every three years on keeping certifications current seems like a hard sell in this economy.  I can't even fathom $4500 for the training pass every three years (whereas it was a no-brainer the last time I did it).  Does anyone know if there will be (more affordable) renewal courses or exams that one can take shortly prior to the end of the

I work for an MSP and one of our clients is a school with around 150+ iPads over multiple campuses.We've recently made the move from Meraki to jamf and with 115 of them sitting in various states of OS versions, I don't seem to be able to get them past the update scheduled stage without getting hands-on with it and manually installing it.They're set to allow automatic checking for updates and scheduled times are outside of school hours. Pushing the install doesn't seem to override this and in a lot of instances, the OS doesn't seem to autonomously update as expected during the set time frame.Is there a command or function to FORCE/override the scheduled update for the installation of new OS? It's school holidays, I don't want to spend the next 2 months checking the portal daily, taking inventory of what refuses to work.

Hi,I have recently generated and pushed a new Local Admin account which successfully deploys however I am unable to immediately sign in with this account until I manually enable filevault access.The account is being pushed to an already setup device and in the Policy I have enabled Allow user to administer computer and Enabled user for FileVault 2 however this does not appear to apply the FileVault access I need and no error appears in logs to indicate why.Can anyone advise on what I may of missed or should try next? 

 Saw this in the changelog for the Jamf Pro API -- anyone know what this is? I tried googling "Jamf Pro Scheduler," but the only results were bringing me back to the API documentation. 

Greetings. Wanted to know if anyone was able to install Microsoft Visio through JamfPro?

I'm using Jamf Pro with some Macs and for some reason I have trouble getting a few M365 apps to update; specifically the Mac App Store versions of Microsoft Word, Excel, and Powerpoint. Interestingly, the Mac App Store versions of Outlook and OneNote update fine. I know the apps having issues are larger sized, but they should still work. I have tried removing and adding the apps to Jamf, removing the VPP option, and a few other things. I have also read about others having the same issue with Mac App Store M365 apps not updating.Anyone experiencing this issue? Any suggestions on how to solve the issue?

Hello this is my first posting.I have an issue on one of our iMac, I tried to re-enroll and install MDM profile but says cannot install the profile. tried to remove is using "sudo JAMF removeFramework" but says "command not found!" tried to checked the but no "JAMF" folder exist. MDM profile exist in System Preferences.Is there a way to manually remove the MDM Profiles?

Hey All,First time poster so be kind :-)Setting up a Jamf Pro solution whereby we are setting up ADE enrolment for new device but also migrating devices from a different MDM vendor solution. Solution Jamf Pro integrated with EntraID/Azure for cloud IdP and also SSO to entra, Jamf Connect is being used. Devices are off corp network and have no direct sight of on premises AD i.e no Kerberos.Migrated device have local mac accounts that use the sAMAccountName (which is being mapped to EntraID (OnPremisesSamAccountName). I have configured the SSO and Cloud IdP Entra Mappings for the migrated devices so that during enrolment the device populates the User and Location inventory with all the user info. As most devices will migrate initially this is currently more important than the workflow for new device enrolments. We are migrating Macs using Jamf Migrate tool as an FYI.However, so the issue we face is with new enrolments in that they take the email/UPN as the local account name firstname.su

So I have an App that needs deploying on a group of shared iPads used by our students, within the plist file xml that's added to the apps respective config tab, there's a UniqueDevID key which I would want to pass a variable to at install.The most obvious variable would be the devices name as specified in Jamf. How could achieve this?

Hey All!Being that this is my first post here, I thought I'd front load this with a little about this meetup. We run a monthly virtual meetup the first Friday of every month (except when it falls on a holiday). We bring in one of the largest groups of experienced Jamf Admins to discuss all things regarding Jamf. During the hour we run through the newest Jamf and Apple updates followed by a Keynote by Guest Speakers and our own staff. We think it's a pretty great community where ideas are shared and questions are answered.This month we're hosting Elliot Jordan to discuss the new tool Escrow Buddy. Escrow Buddy is a brand-new open-source tool for Mac IT and security administrators who escrow FileVault personal recovery keys to their MDM. For Macs that do not have a valid recovery key in escrow, Escrow Buddy securely and transparently generates a new key during the standard macOS login process and triggers its escrow. In this session, Elliot Jordan will cover the reasons FileVault recover

Hi all,I've got someone with a 2015 iMac with Monterey 12.6 installed, trying to install MDM on it. We are able to download/install the CA profile but when trying to install the MDM profile it errors (profile installation failed an error occurred while trying to import the certificate or identity). It had been up for a fair few weeks and I thought a restart would fix it as it usually does but it didn't. It has Sophos installed, we disabled it and tried again but still no go. We updated to Montery 12.7.1 which I think is the highest it will go. Any ideas why it won't install? 

we have been deploying new M1 macbook air machines since July.  we changed our deployment workflow this year to use a workflow in MDS to deploy the os (big sur) and packages (instead of pushing packages/policies over the air through JAMF).  we skip the setup assistant and enroll into mdm through user enrollment.we haven't had any issues except that recently our users started getting the device enrollment notification saying that our organization can automatically configure their mac... even though they have the mdm profile installed and we're actively managing machines through JAMF. has something changed in big sur where this is now expected behavior?  i should hope not... any insight would be appreciated. 

Hello everyone,I am wondering what they proper way is to set up the following....I'd like to allow folks to login with their personal Apple IDs to use iMessage and to be able to connect their AirPods to their MacOS computers but then restrict everything else in iCloud (iCloud Photos, iCloud Drive, Find My, etc.). I see where you can apply iCloud restrictions via Configuration Profile but not sure if applying these also conflict with allowing the aforementioned items I'd like to leave open. Thanks in advance.

Hey Everyone, I know how secure tokens work, I know how to give them out. I have a particular question about having them automatically enabled without having to log into the account manually on each machine. I have it enabled so that every account can have a secure token, when they login. The issue I'm having, is my Local Administrator account.I have my management account as JAMFADMIN, and my local administrator is just "administrator". That's the account I use to reimage machines and do maintenance/updates. As we know, M1 machines need to have the account doing updates/OS installs to have a secure token. I have this account being made on Enrollment, so it should get one. The account is on the machine, but if I do a remote command to do an update, the secure token isn't enabled until I physically go to the computer and log into the account. Then it's available. Does anyone know how to make this token appear, without logging in?If anyone needs any other information, pleas

I just got autopkgr installed and it's copying the built packages to my distribution point. What it's not doing is creating a policy. I've checked that the account has the privileges specified in the readme. I don't see anything helpful in the logs. Anything else that I can check? The category already exists in Jamf, so it should just show up in the category?

Am am trying to secure our jamf pro portal but cant seem to find any documents on this and cant see anywhere to add it in JAMF pro, has anyone secured there logins with 2fa 

I have a script that will do the following: Create a local account based on admin pop-up box and rename the mac to this username-last4ofserial#. The account that is created is in LDAP format and is the user that I would assign in JAMF console in the user location field. I have LDAP fully set up in JAMF pro how can I make an API call to grab the username from the user account or the computer name and update the user location fields in JAMF pro console?

As it is the holiday season, I wanted to offer up a little gratitude in the form of boilerplate code related to topics that come up in the macadmins #scripting & #bash channels again & again. I hope people find it here & find it useful. 1) Logging is always a hot topic. "How do I create a log for my script?" "Where should I write log output?" etc. Without saying this solution is definitive, the script below has a pattern that I have used over & over. In fact, I paste this block exactly into any script I create that needs logging. It uses tee along with exec & with a named pipe. Why? Well, I find this works in all situations to capture all foreground & background processes executed by the script & it creates a dedicated stream / file for the log output regardless of what the script is trying to do. 2) Jamf API. I said in an earlier post I had come up with the shortest, bestest version of making an API call with token auth. I was wrong. I made it shorter

Hello,Posting to the Jamf Community for the first time so I hope I'm in the right place :) We use Jamf Pro to manage MacBooks and iPhones. These devices are corporate devices and registered with Apple Business Manager. The MacBooks and iPhones have been successfully registered and they now also appear within Microsoft Entra as 'Entra Registered'. This was achieved by getting the staff member to log into the Microsoft Entra app on their iPhone and MacBook.Is it possible to have these iPhones and MacBooks appear within Microsoft Entra as 'Entra Joined' instead of 'Entra Registered'.'Entra Joined' means they are corporate owned devices.'Entra Registered' means they are personal/BYOD devices.